What we know about you, and why

1What we collect

When you place an order

Your name, shipping address, email address and phone number. We need every one of these to get a parcel to your door and to tell you where it is.

When you pay

Your payment is processed by Shopify Payments and the card networks. Card numbers never reach our systems and we cannot see them. We receive only the confirmation that a payment succeeded, plus the last four digits for matching a refund to an order.

When you browse

IP address, browser and device type, which pages you opened and in what order. This is standard web analytics and it is what tells us that, say, the size guide is being ignored.

When you write to us

Whatever you put in the message, plus your email address. If you send a photo of a defect, we keep it until the case is closed.

2What we do with it

• Fulfil your order. Pack it, ship it, track it, refund it if it comes back.
• Answer you. Support cannot help without knowing which order you mean.
• Improve the shop. Aggregated, anonymous patterns — which pages people leave, where checkout breaks.
• Send marketing, only if you said yes. Offers and new products. Never more than we would want to receive ourselves.
• Meet legal duties. Tax records, fraud prevention, and resolving disputes.

3Who else sees it

Only the companies that make the shop work, and only the part each one needs:

• Shopify — hosts the store and processes orders and payments.
• Shipping carriers and our fulfilment partner — receive your name and address so the parcel can move.
• Email provider — receives your email address to send order updates and, if you opted in, marketing.
• Analytics — receives anonymised browsing data.

Each of them is bound by contract to use the data only for that job. We may also disclose information where the law requires it, or to prevent fraud.

4How it is protected

The site runs on Shopify's infrastructure with TLS encryption on every page, and card data is handled under PCI DSS by the payment provider. Access to order data is limited to the people who handle support and fulfilment.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affected your data, we would tell you and the relevant authority without delay.

5How long we keep it

• Order records — kept as long as tax and accounting law requires, typically 7 years.
• Support emails — 2 years after the case closes.
• Marketing list — until you unsubscribe, then removed.
• Analytics — anonymised, retained in aggregate.

6Your rights

Wherever you live, we apply these to everyone rather than only to the regions that mandate them:

• See it. Ask for a copy of everything we hold about you.
• Fix it. Correct anything wrong.
• Delete it. Have it erased, except records we must keep by law.
• Take it. Receive it in a portable, machine-readable file.
• Stop marketing. Unsubscribe from any email, or just tell us.

Email support@centipurr.shop and we respond within 30 days. We will not ask you why.

7Cookies

Cookies are small files stored by your browser. We use them for three things: keeping your cart from emptying itself, remembering your preferences, and measuring which pages work.

You can block or delete them in your browser settings. Blocking the essential ones will break the cart, which is a poor trade.

8Children

This shop is not for anyone under 13, and we do not knowingly collect their information. If we discover that we have, we delete it immediately. If you are a parent and believe your child has given us data, write to us.

9Changes to this policy

If we change how we handle your data, this page changes and the effective date at the top moves. Material changes are announced by email to anyone on our list.